2021 CVE Vulnerabilities
23,481 CVEs published in 2021.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2021-40882 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | A Cross Site Scripting (XSS) vulnerability exists in Piwigo 11.5.0 via the system album name and description of the loca... |
| CVE-2021-38950 | HIGH | 7.8 | 0.2% | Dec 14, 2021 | IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when SharedBindingsUserId is set to... |
| CVE-2021-4073 | HIGH | 8.1 | 7.0% | Dec 14, 2021 | The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including ... |
| CVE-2021-44549 | HIGH | 7.4 | 1.9% | Dec 14, 2021 | Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via S... |
| CVE-2021-44235 | MEDIUM | 6.7 | 0.3% | Dec 14, 2021 | Two methods of a utility class in SAP NetWeaver AS ABAP - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752... |
| CVE-2021-44233 | HIGH | 8.8 | 0.8% | Dec 14, 2021 | SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for a... |
| CVE-2021-44232 | HIGH | 7.7 | 1.0% | Dec 14, 2021 | SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided b... |
| CVE-2021-44231 | CRITICAL | 9.8 | 1.3% | Dec 14, 2021 | Internally used text extraction reports allow an attacker to inject code that can be executed by the application. An att... |
| CVE-2021-42367 | MEDIUM | 5.4 | 0.5% | Dec 14, 2021 | The Variation Swatches for WooCommerce WordPress plugin is vulnerable to Stored Cross-Site Scripting via several paramet... |
| CVE-2021-42070 | LOW | 3.3 | 0.5% | Dec 14, 2021 | When a user opens manipulated Jupiter Tessellation (.jt) file received from untrusted sources in SAP 3D Visual Enterpris... |
| CVE-2021-42069 | LOW | 3.3 | 1.0% | Dec 14, 2021 | When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Ente... |
| CVE-2021-42068 | LOW | 3.3 | 0.5% | Dec 14, 2021 | When a user opens a manipulated GIF (.gif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - ver... |
| CVE-2021-42066 | MEDIUM | 4.4 | 0.4% | Dec 14, 2021 | SAP Business One - version 10.0, allows an admin user to view DB password in plain text over the network, which should o... |
| CVE-2021-42064 | CRITICAL | 9.8 | 1.1% | Dec 14, 2021 | If configured to use an Oracle database and if a query is created using the flexible search java api with a parameterize... |
| CVE-2021-42063 | MEDIUM | 6.1 | 22.3% | Dec 14, 2021 | A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage... |
| CVE-2021-42061 | MEDIUM | 5.4 | 0.5% | Dec 14, 2021 | SAP BusinessObjects Business Intelligence Platform (Web Intelligence) - version 420, does not sufficiently encode user-c... |
| CVE-2021-41836 | MEDIUM | 4.8 | 0.6% | Dec 14, 2021 | The Fathom Analytics WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation ... |
| CVE-2021-41067 | HIGH | 7.5 | 0.6% | Dec 14, 2021 | An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of sof... |
| CVE-2021-41066 | HIGH | 7.5 | 1.3% | Dec 14, 2021 | An issue was discovered in Listary through 6. When Listary is configured as admin, Listary will not ask for permissions ... |
| CVE-2021-41065 | HIGH | 7.3 | 0.5% | Dec 14, 2021 | An issue was discovered in Listary through 6. An attacker can create a \\.\pipe\Listary.listaryService named pipe and wa... |
| CVE-2021-3836 | MEDIUM | 5.5 | 0.9% | Dec 14, 2021 | dbeaver is vulnerable to Improper Restriction of XML External Entity Reference |
| CVE-2021-39319 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The duoFAQ - Responsive, Flat, Simple FAQ WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the msg pa... |
| CVE-2021-39318 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The H5P CSS Editor WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the h5p-css-file parameter found... |
| CVE-2021-39315 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The Magic Post Voice WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the ids parameter found in the... |
| CVE-2021-39314 | MEDIUM | 6.1 | 0.8% | Dec 14, 2021 | The WooCommerce EnvioPack WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the dataid parameter foun... |
Check if your code is affected by 2021 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now